That's the point I was making through - the rigor here failed here by Microsoft allowing companies to push this kind of stuff with only some kind of basic sign-

That's the point I was making through - the rigor here failed here by Microsoft allowing companies to push this kind of stuff with only some kind of basic sign-off in the distant past that they get the keys to do this. If Crowdstrike didn't have the capacity to test this, either they should be handing it off to Microsoft to deliver through their channels, or they need to be forced to increase the testing capacity and improve the processes in their delivery (as do all companies with root-level access here)